$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft File: olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json) Hash identifier: fV2EEJj5X7nS4c0sFOCrAZv1FjjdoTBrUGcV2owZ70c= Subject key identifier: 03:38:8E:EB:70:26:25:33:00:D2:99:EF:7F:D0:73:8C:B3:F2:8D:7C Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA Certificate issuer: /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Certificate serial: 05A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft Manifest number: 05A0 Signing time: Mon 12 May 2025 22:57:49 +0000 Manifest this update: Mon 12 May 2025 22:57:49 +0000 Manifest next update: Mon 19 May 2025 22:57:49 +0000 Files and hashes: 1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: mjx4C5Sy45oug4lCF5ytzp7aLKt6CLRLS/eaALSZK+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1440 (0x5a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Validity Not Before: May 12 22:57:49 2025 GMT Not After : May 19 22:57:49 2025 GMT Subject: CN=68227ced-233b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:11:73:88:ba:3d:d5:34:87:10:91:63:85:0d: 29:d0:28:cf:3e:97:97:3b:14:fe:8c:b0:aa:0f:4d: 84:b4:b2:43:e7:7f:32:5f:ae:20:0c:1e:b5:1e:97: 0a:61:fd:fa:05:2d:7a:1a:19:a7:95:e7:19:74:35: 53:e9:c9:7b:a8:4e:2d:26:ec:8e:dd:56:1c:29:ed: f6:31:3d:53:14:24:dc:40:52:9e:13:13:0e:4f:26: c0:e6:3e:91:f1:23:ed:8d:07:ea:e8:c4:9b:03:47: 9c:00:fb:f0:05:22:ba:92:02:41:6a:00:74:63:d0: a3:85:28:5d:cc:e3:ae:c0:e3:ed:b6:f7:6a:2c:12: f3:d8:17:f0:d9:06:9f:e0:c0:09:0b:52:5e:48:72: 4d:4a:a2:bf:9c:46:e5:97:13:0f:37:8d:20:c4:36: b8:54:8e:ad:e2:04:cf:73:95:4d:bb:80:1c:79:1c: 48:03:4d:ea:94:3a:2b:ce:82:d4:0b:ea:99:63:b2: 67:ae:63:ae:4f:a8:9a:57:25:a8:2a:6a:74:e6:e0: 2f:ed:58:ae:ad:e8:d4:49:04:fa:2c:fe:33:5c:de: e6:a2:d7:82:14:94:f6:6b:d9:bb:b3:4e:a7:ff:dd: ee:55:66:d8:4c:4c:42:ef:32:96:c6:81:a0:ac:1d: 82:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:38:8E:EB:70:26:25:33:00:D2:99:EF:7F:D0:73:8C:B3:F2:8D:7C X509v3 Authority Key Identifier: keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:0c:9f:05:a2:0e:30:e1:4a:aa:2a:a3:aa:c9:4d:0d:fa:77: c7:56:26:8c:cc:80:b9:a2:bc:d2:30:40:23:8c:2b:9c:16:2b: c0:6a:aa:eb:00:86:5e:c1:e5:8a:23:5e:64:b6:d1:2f:62:29: 1e:8d:72:f1:bb:a9:e4:d3:09:1f:c5:f5:1d:d4:1e:47:87:65: d3:5d:37:54:d3:88:f1:ed:d4:46:1a:10:92:2e:b3:cf:a8:cf: 91:f2:e1:e7:bf:e5:83:a1:b7:b6:87:e9:fa:9e:a5:d0:9a:c2: 7d:0c:61:4d:df:8a:e7:87:71:94:25:77:bd:9d:ef:ce:5b:b5: f4:40:33:c3:bf:f0:7c:58:01:bc:45:d8:f3:9a:23:c5:f4:28: f1:f9:d0:ef:b1:0c:93:75:30:07:b9:73:74:b7:c0:ef:5a:cd: 3d:b0:8f:3f:37:2c:1a:ac:6c:fc:cb:03:ed:52:28:e3:04:3a: d4:49:1e:aa:05:62:3f:0b:35:1a:22:e4:78:a8:99:74:c0:e5: fb:06:a5:d1:d5:47:de:35:c1:25:29:bd:12:17:35:40:e4:9f: e8:72:6b:c8:9e:7b:2f:d4:93:e5:6d:64:df:10:cc:63:c2:7b: ea:30:8b:c4:1d:8b:90:dd:7e:e0:67:da:dc:98:8b:ae:50:a0: ca:bc:81:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKEEyNUJERjc2M0YwQkE2M0M0OUEzNzZBQkY5NkU1NTUw ODc5RTg1QkEwHhcNMjUwNTEyMjI1NzQ5WhcNMjUwNTE5MjI1NzQ5WjAYMRYwFAYD VQQDEw02ODIyN2NlZC0yMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhFziLo91TSHEJFjhQ0p0CjPPpeXOxT+jLCqD02EtLJD538yX64gDB61HpcK Yf36BS16GhmnlecZdDVT6cl7qE4tJuyO3VYcKe32MT1TFCTcQFKeExMOTybA5j6R 8SPtjQfq6MSbA0ecAPvwBSK6kgJBagB0Y9CjhShdzOOuwOPttvdqLBLz2Bfw2Qaf 4MAJC1JeSHJNSqK/nEbllxMPN40gxDa4VI6t4gTPc5VNu4AceRxIA03qlDorzoLU C+qZY7JnrmOuT6iaVyWoKmp05uAv7ViurejUSQT6LP4zXN7moteCFJT2a9m7s06n /93uVWbYTExC7zKWxoGgrB2C4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAM4jutw JiUzANKZ73/Qc4yz8o18MB8GA1UdIwQYMBaAFKJb33Y/C6Y8SaN2q/luVVCHnoW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zQkYwQUU5Q0M5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBqeEpvM2FyLVc1VlVJZWVo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sdmZkajhMcGp4Sm8zYXItVzVWVUllZWhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zQkYwQUU5Q0M5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBq eEpvM2FyLVc1VlVJZWVoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVDJ8Fog4w4UqqKqOqyU0N+nfHViaMzIC5orzSMEAjjCucFivAaqrr AIZeweWKI15kttEvYikejXLxu6nk0wkfxfUd1B5Hh2XTXTdU04jx7dRGGhCSLrPP qM+R8uHnv+WDobe2h+n6nqXQmsJ9DGFN34rnh3GUJXe9ne/OW7X0QDPDv/B8WAG8 RdjzmiPF9Cjx+dDvsQyTdTAHuXN0t8DvWs09sI8/NywarGz8ywPtUijjBDrUSR6q BWI/CzUaIuR4qJl0wOX7BqXR1UfeNcElKb0SFzVA5J/ocmvInnsv1JPlbWTfEMxj wnvqMIvEHYuQ3X7gZ9rcmIuuUKDKvIFV -----END CERTIFICATE-----Generated at Wed May 14 13:53:29 2025 by rpki-client